Privacy Policy

Thank you for your interest in this Privacy Policy, and welcome to Mythological Artistry and our website (our “website”). At Mythological Artistry, we are committed to protecting and respecting your privacy. This privacy policy sets out the basis on which we will process any Personal Data that we may collect about you as a visitor to our website or our service user or potential service user, or in any other cases where we specifically state that this policy will apply. This policy further sets out how we protect your privacy and your rights in respect of our use of your Personal Data.

WHAT IS PERSONAL DATA?

Personal Data is information that makes it possible to identify a natural person. This includes in particular, your name, date of birth, address, telephone number, e-mail address, but also your IP address. Anonymous data exists if no personal reference to the user can be made.

WHAT IS PROCESSING?

"Processing" means and covers virtually any handling of data.

WHAT LAW APPLIES?

We will only use your Personal Data in accordance with the EU's General Data Protection Regulation (“GDPR”), Portugal’s Law No. 58/2019 (“DPA”) and of course only as described in this Privacy Policy.

WHO IS RESPONSIBLE FOR DATA PROCESSING?

The responsible party within the meaning of the GDPR is Mythological Artistry, Rue 28 de maio 28, 6000-541 Juncal do Campo, Castelo Branco, Portugal. If you want to contact us or if you have any questions, you can reach us by email using mythologicalartistry@gmail.com.

WHAT ARE THE LEGAL BASES FOR PROCESSING PERSONAL DATA?

In accordance with the GDPR, we have to have at least one of the following legal bases to process your Personal Data:

• you have given your consent;

• the data is necessary for the fulfillment of a contract / pre-contractual measures;

• the data is necessary for the fulfillment of a legal obligation; or

• the data is necessary to protect our legitimate interests, provided that your interests are not overridden.

WHAT PERSONAL DATA DO WE COLLECT FROM YOU?

a) Personal data that you give us:

Contacting us: You provide us with most of the data that we process when you contact us such as your name, email address, postal address. This data is collected and processed exclusively for the purpose of contacting you and processing your request and then deleted again, provided that there is no legal obligation to retain it.

Account Registration: For this purpose, you provide your full name and email address and can choose a password. The entry of your data is encrypted so that third parties cannot read your data when it is entered. The legal basis for processing is the provision or initiation of a contractual service and your consent.

Buying our Unique Esoteric and Mythical Illustrations: We process your full name, e-mail address, and billing address for the digital delivery of your order and the data related to your contract with us to handle the contractual relationship. The legal basis for processing is the provision of a contractual service. If you make a purchase your payment will be processed via our payment service provider Stripe. Payment data will solely be processed through Stripe and we have no access to any Payment Data you may submit. The legal basis for the provision of a payment system is the establishment and implementation of the contract.

When using our personalized services: We process the Personal Data involved in your use of our personalized services in order to be able to provide our contractual services. This includes in particular our support, correspondence with you, invoicing, fulfillment of our contractual, accounting and tax obligations. Accordingly, the data is processed on the basis of fulfilling our contractual obligations and our legal obligations.

Administration, financial accounting, office organization, contact management: We process data in the context of administrative tasks as well as organization of our business, and compliance with legal obligations, such as archiving. In this regard, we process the same data that we process in the course of providing our contractual services. The processing bases are our legal obligations and our legitimate interest.

b) personal data that our website and other systems collect about you:

Log Files: If you visit our website it will automatically collect some information about you and your visit, including the Internet protocol (IP) address used to connect your device to the Internet and some other information such as the pages on our site that you visit. This is used to monitor the performance of the website and improve the experience of visitors to the website.

Hosting & CMS: To provide our website, we use the services of Hostinger who process all data to be processed in connection with the operation of our website and its content management on our behalf. The legal basis for the data processing is our legitimate interest in providing our website.

HOW WILL WE USE YOUR PERSONAL DATA?

We may collect, store and use your Personal Data for the following purposes:

• To operate, manage, develop and promote our business and, in particular, our relationship with you and related transactions including, for example:

• Marketing purposes (when we have either gathered prior opt-in consent and/or have a legitimate interest to send you communications which we believe to be relevant and of use to you);

• Accounting and billing / payment purposes;

• To operate, administer and improve our website and other aspects of the way in which we conduct our operations;

• To offer you our Unique Esoteric and Mythical Illustrations and services;

• To provide you with services or information that you may have requested;

• And to keep you informed and updated on relevant or services you may be interested in.

• To protect our business from fraud, breach of confidence, theft of proprietary materials and other financial or business crimes;

• To comply with our legal and regulatory obligations and bring and defend legal claims and assert legal rights; and

• if the purpose is directly connected with an assigned purpose previously made known to you.

We will only process your Personal Data as necessary so that we can pursue the purposes described above and where we have a legal basis for such processing. Where our lawful basis for processing is that such processing is necessary to pursue our legitimate interests, we will only process your Personal Data where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest. In exceptional circumstances we may also be required by law to disclose or otherwise process your Personal Data.

DATA SHARING

In certain cases, it is necessary to transmit the processed Personal Data in the course of data processing. Personal Data is transferred to our service providers in the following instances:

• In the context of fulfilling our contract with you,

• To use marketing services and to advertise our services online,

• To communicate with you,

• To provide our website and

• To state authorities and institutions as far as this is required or necessary.

We may transfer your Personal Data to other companies as necessary for the purposes described in this Privacy Policy. In order to provide adequate protection for your Personal Data when it is transferred, we have contractual arrangements regarding such transfers. We take all reasonable technical and organizational measures to protect the Personal Data we transfer.

ADVERTISING

We display relevant advertising offsite using third-party tools and cookies that track your website activity (e.g., product interests, page visits) to personalize ads and improve their relevance. These tools connect your browser to provider servers. Processed data includes IP address, browser, URL, date/time, pixel/cookie IDs, and website interactions (orders, clicks). Legal bases are our legitimate interest and your cookie consent.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will delete your Personal Data when we no longer need such Personal Data, for instance where:

• It is no longer necessary for us to retain your Personal Data to fulfill the purposes for which we had collected it;

• We believe that your Personal Data that we hold is inaccurate;

• Or in certain cases where you have informed us that you no longer consent to our processing of your Personal Data.

Sometimes, however there are legal or regulatory requirements which may require us to retain your Personal Data for a specified period, and in such cases we will retain your Personal Data for such specified period ; and we may need to retain your Personal Data for certain longer periods in relation to legal disputes, and in such cases we will retain it for such longer periods to the extent required.

DATA SECURITY

Our website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us. We have also implemented numerous security measures (“technical and organizational measures”) for example encryption or need to know access, to ensure the most complete protection of Personal Data processed through our website.

YOUR RIGHTS AND PRIVILEGES

Privacy rights: You can exercise the following rights:

• The right to access;

• The right to rectification;

• The right to erasure;

• The right to restrict processing;

• The right to object to processing;

• The right to data portability;

Updating your information and withdrawing your consent

If you believe that the information we hold about you is inaccurate or request its rectification, deletion, or object to legitimate interest processing, please do so by contacting us.

Access Request

In the event you want to make a Data Subject Access Request, please contact us. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we will tell you why.

Complaint to a supervisory authority

You have the right to lodge a complaint about our processing of Personal Data with a supervisory authority responsible for data protection. As Mythological Artistry is based in Portugal, the competent data protection authority is the Comissão Nacional de Proteção de Dados (CNPD) (www.cnpd.pt). We would appreciate the opportunity to address your concerns before you contact the CNPD.

What we do not do:

• We do not request Personal Data from minors and children without obtaining prior parental or legal guardian consent;

• We do not process special category data without obtaining prior specific consent;

• We do not use Automated decision-making including profiling; and

• We do not sell your Personal Data.

HOW DO WE MAKE CHANGES TO THIS POLICY?

This Privacy Policy may be updated. The updated policy will be posted on our website and will be effective immediately upon posting, unless otherwise legally required. We recommend checking it regularly. Where legally required or for previously collected information, you may be notified of and asked to agree to material changes.

EFFECTIVE DATE

Sunday, 8th of June, 2025